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(54) Handling of security codes for digital image data files 



(57) A digital image processing apparatus es provid- 
ed with means tor offering, for selection by an operator, 
at least one digital image data file for the purpose of fur- 
ther handling, e.g. printing. A file of this kind can be pro- 
tected by means of a code which must first be input by 
the operator before the apparatus releases the file. 

• If a number of files thus protected are selected and 
processed either together or in series by an operator, 
after the first file the apparatus first tries out for each 
subsequent file whether the code applicable for the pre- 
ceding file is also valid for the new file. If so, the appa- 
ratus releases the file immediately, whereas otherwise 
it asks for a code again. 



user selects file(s) and gives command for 
operation 




take next file 



| delete stored code{s) j — » | exit [ 

FIG. 13 



.Printed by Jouve. 76001 R4RIS (FR) 



Description 



EP 0 949 806 A2 2 

wherein 



[0001] The invention relates to a method of making 
available digital image data files in a digital image 
processing apparatus, comprising: offering for selection 
by an operator at least one digital image data file for the 
purpose of further handling. 

[0002] The invention also relates to an apparatus in 
which the method according to the invention is applied 
[0003] A method of this kind is known from EP-A 0 
689 157. This known method is aimed at printing digital 
image data files prepared in a workstation connected 
via a local network to a printing apparatus, wherein a file 
*s noi printed immediately, but is simply stored in the 
memory of the printing apparatus and is not printed until 
it has been selected by an operator at the printing ap- 
paratus control panel. This specific manner of printing 
is termed "interactive printing". 
[0004] EP-B 0 208 342 describes a method of printing 
digital image data files, wherein a file is protected by a 
code. Only when an operator has keyed in on the print- 
ing apparatus control panel a code corresponding to this 
security code is the file really printed. In this way unau- 
thorised personnel can be prevented from printing a file 
and thus gaining confidential information. The system 
described in that document, however, is not suitable for 
use with more than one print file at a time, so that a han- 
dling session is always limited to one file. Accordingly, 
the use of a series of protected files is not involved here' 
[0005] If a user now sends various print files, each 
provided with a security code, from his workstation to 
the printing apparatus, it is inconvenient to use a sepa- 
rate code for each file. The user must then exactly re- 
member what code he has input for what file. As a rule, 
a user will therefore prefer always to use the same code. 
As long as that one code is not known to others, it does 
not cause any security problems. 
[0006] In the light of these considerations it is a dis- 
advantage that in the case of a series of protected files 
an access code has to be input again by the user for 
each protected file, all the more so in that in many cases 
it is always the same code. The user finds this an un- 
necessary waste of time. 

[0007] There is therefore a need for a release proce- 
dure which burdens the operator with a request to key 
in the code only in essential cases (i.e. those cases in 
which a different code is used). 
[0008] The present invention meets this need by the 
fact that the method comprises the following steps: 
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a) in a procedure for releasing a first file provided 
with a security code the correct access code is 
maintained for an uninterrupted series of selection 
actions by the operator, 

b) in a procedure for releasing a second file provid- 
ed with a security code, which procedure follows on 
at least one procedure for releasing a first file pro- 
vided with a security code, a trial run is first auto- 
matically carried out as to whether a maintained ac- 
cess code for a said first file is also correct for the 
said second file, and 

c) if no access code correct for the second file ap- 
pears to be available the operator is asked to input 
an access code for the same. 



after selection of at least one file by the operator, 
checking whether the selected file is provided with 
a security code; 

if a selected file is provided with a security code, 
asking the operator to input an access code corre- 
sponding to the security code; and 
if the operator inputs the correct access code, re- 
leasing the selected file for the said further handling; 



[0009] As a result, the useras a rule need input a code 
only once to be able to process all the files. For extra 
20 rapid processing, the user can also select a number of 
files together, e.g. as is conventional in the Windows 
system, by actuating the control key simultaneously with 
the mouse button and indicate all the required files. Dur- 
ing the processing, the files thus selected collectively 
2S will be released and processed one by one, the access 
code being asked for in the case of the first file and the 
other selected files being processed without further in- 
tervention on the part of the operator, always assuming 
that all the files are provided with the same security 
30 code. 7 

[0010] In a first embodiment of the method according 
to the invention, all the codes used during a handling 
session (when there are more than one code) are main- 
tained and tried out. 

35 [0011] In an alternative embodiment, only the access 
code of the previous protected file is used. As a result 
the procedure becomes more difficult to survey and less 
flexible. 

[0012] In a further embodiment of the method accord- 
ing to the invention, the release procedure is directed at 
releasing a data file for printing. 
[0013] In yet another embodiment, the release proce- 
dure is aimed at releasing data files generated during a 
scanning process, either for printing or for sending to a 
45 workstation or some other destination on the network. 
[001 4] The invention will now be explained with refer- 
ence to the following description and the drawinqs 
wherein: 

[001 5] Fig. 1 illustrates the apparatus according to the 
50 invention. 

[0016] Fig. 2 is a diagram showing the constituent 
parts of the apparatus according to the invention. 
[0017] Figs. 3 and 4 illustrate the apparatus operator 
control panel in various situations. 
55 [0018] Figs. 5A and 5B are flow diagrams to explain 
the operation of the apparatus accounting and security 
unit. 

[0019] Fig. 6 is a flow diagram of a process for making 



2 



3 



EP 0 949 806 A2 



4 



a copy. 

[0020] Fig. 7 is a flow diagram of a reception process 
for print files. 

[0021] Fig. 8. is a flow diagram of the initial procedure 
of an interactive printing process. 5 
[0022] Fig. 9 is a flow diagram of a printing process. 
[0023] Fig. 10 is a flow diagram of a scan process. 
[0024] Fig. 11 illustrates the operator control panel. 
[0025] Fig. 1 2 is a flow diagram of a procedure for call- 
ing up a scan file from the apparatus. -io 
[0026] Fig. 13 is a flow diagram for a procedure for 
handling series of protected files. . . 
[0027] Fig. 1 shows the apparatus according to the 
invention, on which the different parts are shown dia- . 
grammatically separately. : \5 

[0028] The document feeder 110 is provided with an r , , 
input tray 111 for the introduction of a stack of docu-. : 
ments, a transport mechanism (not shown)rfor trans- 
porting the documents one by one. along- the scanner. r * 
unit 120, and a delivery tray 112, in which the documents f<? 
are placed after scanning. . 

[0029] The scanner unit. 120 comprises a flat bed . 
scanner provided with a glass platen on which an orig- 
inal, document can be. placed, a CCD array and an im- . 
aging unit consisting of a movable mirror and lens sys- ,..25. 
tern for imaging the document on , the. CCD. array. In t . . 
these conditions the CCD array generates electrical sig- 
nals which are converted into digital image data in man- ». 
ner known per se. 

[0030] The printer unit 1 30 comprises an electro-pho- 30 
tographic processing section known per se : in which a 
photoconductiye medium is charged, exposed by 
means of an LED array in accordance with digital image 
data, and is developed with toner powder, whereafter 
the toner image is transferred and fixed on an image 35 
support, usually a sheet of paper. 
[0031] A stock of image supports in different formats 
and orientations is available in the supply section 140. 
[0032] The image supports with the toner image are 
transported to the finishing and delivery section 150, 40 
which if necessary collects them into sets and staples 
them and then deposits them in the delivery tray 151 . 
[0033] An operator control panel 160 is provided on 
the apparatus for operation thereof. It is provided with a 
display and keys and is connected to an operator control 45 
unit (not shown here). 

[0034] The control electronics are shown diagram- 
matically by reference 170. A cable 171 connects this 
section of the apparatus to a local network 10 (not 
shown here). 50 
[0035] Fig. 2 is a diagram showing the constituent 
parts of the apparatus according to the invention. 
[0036] The apparatus 1 comprises a basic unit 2 
which contains a scanner unit 3, a printer unit 4, a set 
memory 5 and a control unit 6 for these units, hereinafter ss 
termed the CopyController. 

[0037] The basic unit 2 contains the units and func- 
tions required for making a simple copy. The scanner 3 



during the scanning of an original document generates 
digital image data and stores them in the set memory 4, 
whereafter the printer 5 reads out the said image data 
from the set memory 4 and prints them on an image sup- 
port, usually a sheet of paper. This process is controlled 
by the CopyController 6. The set memory 4 in this de- 
scription also comprises an image processing function, 
although this is not essential to the present invention 
and is therefore not explained further. 
[0038] The apparatus 1 also comprises a number of 
units required to print digital image data which are fed 
via a local network 10 from a digital environment, and 
for exporting digital image data generated by the scan- 
ner 3 to the digital environment via the same local net- 
work 10. 

[0039] The term "digital environment" as used here 
denotes one or more workstations 11a, 11b, 11c, on 
which a program is operative for communication with the 
apparatus according to the invention, and which are also 
connected to the local network 10. 
[0040] . The apparatus 1 is provided with: 

■v a management unit 12, hereinafter referred to as 
: . 1: the; JobManager, which manages the processing 
processes and also updates an administration sys- 
-. Jem for a|l the copying, scanning and print jobs 
-. present, 

r, . an operator control unit 13, also termed a: Userl- 
, nterface (Ul), : provided with an operator control pan- 
el on the apparatus housing, with a display and keys 
for operation of the. apparatus 1, . 
an InputHandler 15 for receiving and transmitting 
digital data reaching the apparatus via the network 
1 0 from the digital environment and an OutputHan- 
dler 16 for sending digital data via the network 10 
to the digital environment, 

a storage unit 20 formed by a high-capacity hard 
disk, a unit 21 hereinafter referred to as a JobServer 
for managing the data files on the storage unit 20 
and for controlling the processing processes, 
a control unit 25 hereinafter referred to as a 
PrintHandler, which is dedicated to providing a 
printing process, and a control unit 26 hereinafter 
referred to as a Scan Handler, which is dedicated to 
. providing a scanning process, 
an accounting and security unit 27, which inter alia 
manages the authorisation of users and access 
codes, 

- a conversion unit 28 for converting digital data files 
to different formats. 

[0041] Fig. 2 shows control connections by means of 
thin arrows and data transport connections by means of 
thick arrows. 

. [0042] The JobManager 1 2 is connected to the oper- 
ator control unit 1 3, the JobServer 21 , the CopyControl- 
ler 6, the accounting and security unit 27 and, via the 
network 10 and the InputHandler 1 5 and OutputHandler 
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16, to the workstations 11a - c. The latter connection is 
indicated diagrammatically by direct broken-line arrows. 
Apart from being connected to the JobManager 12, the 
JobServer 21 is also connected to the storage unit 20, 
the InputHandler 15, the OutputHandler 16, the 
PrintHandler 25, the ScanHandler 26 and the conver- 
sion unit 28. The CopyController 6 is connected to the 
scanner unit 3, the set memory 4 and the printer unit 5, 
and also to the JobManager 12, the PrintHandler 25, the 
ScanHandler 26 and the accounting and security unit 
27. 

[0043] Digital data files which are sent to the appara- 
tus 1 via the network for printing are either of a first type 
or a second type. Files of the first type are required to 
be printed directly, i.e. without further action on the part 
of an operator at the apparatus, while files of the second 
type are required only to be stored in the memory of the 
apparatus and not to be printed until an operator explic- 
itly so requests at the apparatus by selecting by means 
of the operator control panel. The type of file involved is 
apparent from an attribute added to the file. 
[0044] Processing of a data file of the first type is re- 
ferred to in this description as automatic printing (AP). 
[0045] Processing of a data file of the second type is 
referred to as interactive printing (IP). The procedure 
with this is as follows (see Fig. 2). 
[0046] A second type data file for printing sent by a 
workstation via the network is received by the InputHan- 
dler 1 5. The latter extracts from the file a number of pre- 
determined identification data and passes such data to 
JobServer 21, which in turn transmits the data to Job- 
Manager 1 2. In this example, the extracted identification 
data comprise the name of the owner and the name of 
the file itself. The file is then stored unchanged in the 
storage unit 20, whereafter the apparatus passes into 
the standby mode. 

[0047] JobManager 12 manages an administration 
system in which the identification data of all the data files 
for printing stored in the storage unit 20 are entered. If 
a new file is supplied via the network, then the JobMan- 
ager 12 adds the identification data thereof in connec- 
tion with the name of the owner/sender to the adminis- 
tration system. 

[0048] The storage unit 20 together with the adminis- 
tration system of the JobManager 12 form, as it were, a 
set of "logic storage spaces" for data files, each logic 
storage space being allocated to one user. Thus in ac- 
tual fact storage in the user's logic storage space means 
that the file is stored in the storage unit 20 and entered 
in the administration system in connection with the 
name of that user. A logic storage space can be protect- 
ed by a code specific to the owner/user, and in practice 
this means that an operator can only obtain information 
concerning the files stored in a specific logic storage 
space after he has input this code. 
[0049] There can also be one or more logic storage 
spaces for general use which are not protected by a 
code, so that everyone has access to that logic storage 



space. All kinds of files used by numerous users, for ex- 
ample specific forms, can be stored in a public storage 
space of this kind. 

[0050] The manager of the apparatus can set the Job- 
5 Manager 12 so that it does not accept any print jobs 
which are required to be printed immediately (files of the 
first type or AP). In that case, the JobManager automat- 
ically converts such jobs into interactive print jobs (IP) 
and stores the data file in storage unit 20 in the form of 
10 files of the second type. 

[0051] When an operator wants to have a specific da- 
ta file of the second type printed, he must give a com- 
mand fnr thic hw 

■ — j ...w*-iiw wi »ic ap^aicaiub uperaior con- 
trol panel 1 60. In response to this, the data file is brought 
is out of the storage unit 20 and converted to printable data 
by the PrintHandler 25, and after intermediate storage 
in the set memory 4 the data are processed by the print- 
er unit 5 to give a print. A print file of the second type 
can be protected by means of a code by the sender This 
20 code has the form of an attribute to the print file. If a user 
wants to print this file interactively, he must input the se- 
curity code on the operator control panel before the file 
is printed. 

[0052] When a data file of the second type has been 
^ printed, it remains in principle stored in the storage unit 
: 20 until it is removed by the user himself or the manager 
of the apparatus. To this end, he gives a command for 
removal of a selected file. In response to this the Job- 
Manager 12 passes a command to the JobServer 21 to 
30 erase the intended file from the storage unit 20 and it 
removes the identification data from that file from its ad- 
ministration system. 

[0053] The operator control panel 160 belonging to 
the operator control unit 1 3 is shown in Fig. 3 and com- 
3S prises a display screen 60, such as an LCD display, and 
a number of keys, namely a start key 61, number keys 
62, correction key 63 and selection keys 64A E, 65A-D 
and the key cluster 66A-D. All these elements are con- 
nected to the operator control unit 13, which in response 
40 to operation of the keys passes signals to the JobMan- 
ager 12 and which also controls the display screen 60 
to display options and messages to the operator 
[0054] When the apparatus has been switched on, the 
display screen 60 displays an image formed by a 
45 number of vertical columns, each situated above one of 
the selection keys 64A E. Each column relates to a spe- 
cific basic function of the apparatus and shows the dif- 
ferent possible settings for that basic function. For ex- 
ample, the furthest left column is allocated to the choice 
so between a copying function, in which a document is 
scanned by the scanner and then reproduced, a printer 
function for interactive printing, in which a print is made 
using a data file of the above-mentioned second type 
sent via the network for printing, a scanner function, in 
55 which a document is scanned while generating a scan 
file that can then be fetched by a workstation, and a de- 
ferred copying function ("scan now, print later"), in which 
a document is scanned while generating a print file of 
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the second type which is stored in the storage unit of the 
apparatus and can be printed with the printer function. 
The setting selected at any time, the copying function in 
this case, is indicated by a marker, such as a dark dot, 
or by highlighting. 

[0055] By actuating a selection key an operator can 
choose a different setting, e.g.* in accordance with a cy- 
clic pattern. As a result of a change of a setting the func- 
tion of one or more of the other selection keys may 
change, because the old function is no longer relevant 
and other selection options are required. Different text 
relating to the new function then appears in the associ- 
ated column of the display screen 60. 
[0056] The selection keys 65A-D offer the possibility 
of bringing up. a different set of functions which cannot 
be displayed by the restricted dimensions of the display 
screen 60. These are generally functions which are not 
required for a simple copying or print job, but which offer 
the operator more options to obtain special printing re- 
sults. In this example, these functions comprise shifting 
the margin on the print, adding covers, and multiple up. 
The meaning of the keys 65A-D is indicated in ; an asso- 
ciated field in the display screen 60 directly beneath 
each key. When one of the keys is actuated the corre- 
sponding set of functions is activated and the layout of 
the display screen 60 is adapted to the associated func- 
tions. At the same time; this selection- is displayed by 
framing or otherwise making conspicuous that field on 
. the display screen 60 which belongs to the actuated key 
of the group 65 A-D. • - r 
,[0057] The operator control panel 19 also contains a 
number display 70 to indicate the number of prints set, 
as is generally customary on copying machines. 
[0058] If the printer function has been selected by key 
64A in the "basic settings 0 group , the columns above 
the keys 64B (simplex or duplex, both in respect of the 
original document and the copy sheet), 64C (stapling) 
and 64D (the choice of format of the print paper) relate 
to the finishing of the copying job and the column above 
key 64E relates to light/dark control for the copy. 
[0059] Fig. 4 shows the layout of the display screen 
60 after the printer function for interactive printing of da- 
ta files of the second type has been selected by key 64 A 
in the group "basic settings". In this case the keys 64D 
and 64E now have the function of specifying the data 
file for printing by selection of users and file name. Dif- 
ferent files of the second type, from different users, may 
in fact be stored in the memory. All these files are en- 
tered in the administration system of the JobManager 
12, as described above, and can be displayed on the 
display screen 60 for selection. 

[0060] After actuation of key 64D, an operator can se- 
lect a user name from the list of users who have sent 
one or more files, and after actuation of key 64E a file 
name can be selected from the list of files sent by the 
selected user. ' 
[0061] In response to the actuation of key 64D the col- 
umn on the display screen above this key is provided 



with a frame 90 and a star symbol 9 1 to show that a user 
name can be selected and the star keys 66A-D are ac- 
tive for that selection. As a preselection, the name of the 
user who last sent a file to the machine is automatically 

5 selected as the name. 

[0062] The pair of keys 66A/B is used to proceed al- 
phabetically through all the user names in the list, for- 
wards with key 66 A and backwards with key 66 B. If there 
are more names than can be displayed simultaneously 

10 in the frame 90, then as many names as fit within the 
frame are displayed and the whole list is automatically 
scrolled through. A bar having text therein in reverse vid- 
eo indicates what name has been selected. 
[0063] In response to actuation of key 64E, the col- 

"is umn of the display screen above that key is provided 
with a frame and a star symbol in exactly the same way 
as the procedure on actuation- of key 64D as described 
. above, in order to indicate that a file name can be se- 
lected and that the star keys 66A-D are active for that 

20 selection. The selection with the star keys is exactly the 
same as to that involved in the selection of a user name. 
The last file sent is selected, for example, as a prese- 
lection. 

[0064] After selection of a file, the printing process is 

25 started by actuating the start key 61. 

[0065] The operation of the accounting and security 
unit 27 will now be explained by reference to Fig. 5Aand 

- Fig. 5B. This unit both controls access to the copying, 
scanning and printing, and the accounting for copies, 

30 scans and prints made. It has available a database in 
which an entry can be made for each user by the appa- 
ratus manager. For a user, a user code (hereinafter re- 
ferred to as the "PIN" code) is stored at his user name 
and a total to which is added the copies and prints made. 

35 Each user name also has an authorisation code stored 
to determine the authorisation of the relevant user to 
make use of the apparatus. This can be set up by the 
apparatus manager, so that access can, for example, 
be occasionally denied. The authorisation can also be 

40 automatically denied to a specific user if; for example, 
a predetermined credit has been used up. 
[0066] Fig. 5A describes the case in which a user 
makes a copy or print at the apparatus! In that case he 
must first input his user code by means of the number 

45 keys on the operator control painel (5-1). If the code is 
correct (5-2), the accounting and security unit 27 checks 
the authorisation (5-3). And if this is also in order then 
the relevant user may make his copies, scans or prints 
(5-4) and these are added to the user's total usage. If 

so either the user code is incorrect or the user is not au- 
> thorised, then the unit 27 refuses to release the appa- 
ratus for use and reports this on the display on the op- 
erator control panel (5-5). 

[0067] Fig. 5B describes the case in which a user 
ss sends a digital data file from his workstation to the ap- 
paratus for immediate printing. The task of the account- 
ing and security unit 27 then consists firstly in checking 
whether the user name, which always forms part of the 
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data file, occurs in the database (5-11). 
[0068] If the database does not contain the user's 
name for a received print file, then the accounting and 
security unit 27 makes a new entry in the database 
(5-15) for this user's name, with an automatic authori- 
sation. The mode in which the accounting and security 
unit 27 does this is hereinafter referred to as the "dy- 
namic mode". It may be that the accounting and security 
unit 27 has been brought into a different mode, herein- 
after referred to as the "static mode", by the apparatus 
manager, in which case the user's name is not added to 
the database and the print job is automatically not car- 
ried out (5-16). This first treatment is indicated in Fig. 
5b in a block I having a broken-line frame. 
[0069] If the check in block I has a positive result, then 
the authorisation is checked (5-12) and if it is also in 
order then the print file is processed further (5-13), the 
prints being added to the user's total usage. 
[0070] The access system of the accounting and se- 
curity unit 27 can also be switched off so that anyone 
can without difficulty copy, scan and, from a workstation, 
print. In relation to a print job from the operating control 
panel on the apparatus, the access system remains par- 
tially active, namely for protecting individual print files, 
as will be described hereinafter. 



4, and the printer unit 5 is started to read the digital data 
out of the set memory 4 and print them on sheets of pa- 
per (6-70 and 6-80). 

[0076] When all the documents have been scanned 
s and printed, the CopyController 6 reports the job fin- 
ished to the JobManager 1 2 (6-90) and the copying ac- 
tion is completed. 
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Reception of a print file 



Copying 

[0071] Fig. 6 shows the procedure for making a copy. 
It is assumed in this case that the access system of the 
accounting and security unit 27 is switched on. 
[0072] At the start of the process (6-1 0), the apparatus 
is in the "copying" mode or the operator selects that 
mode by means of key 64A on the operator control panel 
160. The operator control unit 13 now waits for a user 
code and when the operator inputs this passes it through 
to the JobManager 1 2 (6-20). By means of the account- 
ing and security unit 27 the JobManager 1 2 checks the 
authorisation of the relevant user (6-30). If this is not in 
order, then the JobManager refuses to make a copy and 
reports this on the display on the operator control panel 
160(6-40). 

[0073] If the authorisation is in order, then the opera- 
tor can start copying, by making settings for the process 
on the operator control panel, placing documents in the 
input tray 1 1 1 of the document feeder 1 1 0 and actuating 
the start key 61 (6-50). The settings and the start com- 
mand are then transmitted by the operator control unit 
13 to the JobManager 12. 

[0074] If the access system of the accounting and se- 
curity unit 27 was switched off, then step 6-50 immedi- 
ately follows step 6-10. 

[0075] The JobManager 1 2 then gives a command to 
the CopyController 6 to activate the various parts of the 
apparatus (6-60). On the command of the CopyControl- 
ler 6 the scanner unit 3, including the document feeder 
110, is now started to scan documents one by one and 
pass the digital data thus generated to the set memory 



[0077] Fig. 7 is a description of the procedure on the 
arrival, via the network, of a data file of the first or second 
type for printing. 

[0078] The relevant data file is received by InputHan- 
7 $ dler 15. This extracts identification data (including the 
name of the user and of the file) and print specifications 
(e.g. printing and finishing parameters), determines 
whether it is a print file of the first (AP) or of the second 
(IP) type, reports the job to the JobServer 21 and stores 
20 the entire f ile, i. e. the print specifications and the image 
data for printing, in the storage unit 20. The JobServer 
21 in turn reports the job, with the relevant data, to the 
JobManager 12. 

[0079] If the print file is of the second type, the Job- 
25 Manager enters the job as such in its job administration 
system, whereafter no further activities take place in re- 
spect of this job. 

[0080] If the print file is of the first type, the further han- 
dling thereof depends on whether the JobManager 12 

30 is in the mode in which it accepts automatic print jobs 
(AP). If not, the JobManager enters the print job in its 
job administration system as being an interactive print 
job IP and does not pass to direct printing. A print-out 
can be made, however, giving the reasons why the job 

3 $ has not been carried out. 

[0081] If the JobManager 12 is in the mode in which 
it does accept automatic print jobs, it calls in the ac- 
counting and security unit 27 to determine whether the 
job can be processed. The accounting and security unit 

to 27 proceeds as described in connection with block I in 
Fig. 5B. If this check shows that the file may not be print- 
ed, then the Job Manager enters the print job in its job 
administration system as being an interactive print job 
(IP) and does not pass todirect printing. A message can 

45 be printed out on a sheet of paper, however, giving the 
reasons why the job has not been carried out. 
[0082] If the check by the accounting and security unit 
27 proves positive, the JobManager includes the job in 
the print queue for automatic print jobs (AP-queue), 

so where it has to wait its turn for processing. 

Interactive printing 

[0083] Fig. 8 shows the course of events when a user 
55 gives an interactive print order with the aid of the oper- 
ator control means on the apparatus operator control 
panel. 

[0084] The user will start by selecting the print func- 
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tion with key 64A (Fig. 3/4). The operator control unit 1 3 
then passes a request to the JobManager 1 2 to pass a 
list of all the users who have sent a print job of the sec- 
ond type that at that moment are still stored in storage 
unit 20. In response to that request, the JobManager 
makes up a current list and passes it. to the operator con- 
trol unit 13. 

[0085] The operator control unit displays this list on 
the display, in the column above key 64D (Fig. 4), where- 
after the user can select his name. After the user has 
done this, he actuates key 64E to obtain an overview of 
his own print jobs. In response to this, the operator con- 
trol unit 1 3 gives the selected user's name and a request 
for a list of print jobs of that user to the JobManager. 
[0086] The Job Manager now asks the accounting 
and security unit 27 whether the relevant user's name 
occurs in its database. The unit 27 then proceeds as 
described in connection with block I in Fig. 5B. If the 
name really does occur i n. the database, . the Job Man- 
ager asks the accounting and security unit 27 whether 
there is a user's code for this user's name, and, , if so, it 
conducts a dialogue with the user through the agency 
of the operator control unit 1 3 in order to check the user's 
code, If the result is positive, the JobManager makes up 
a current list of interactive print jobs of the relevant user 
and passes it through to the operator control unit 13, 
wh ich.su bm its this list to the user for. selection on display 
60. • ... \ , ./ 

[0087]. The user now selects a print file, the name^of . 
which is transmitted by the operator control unit 13 to 
the JobManager .1 2. the latter now first executes a con- 
trol procedure for possible file protection. In so doing it 
enquires from the JobServer 21 whether a security code 
has been sent with the selected file, and the latter 
checks the stored file for this. If the file is actually pro- 
tected, the JobManager through the intermediary of the 
operator control unit again carries out a dialogue with 
the user, in which it asks for a code and checks it. If the 
result is positive, the JobManager releases the file for 
printing, and the user can set finishing parameters on 
the operator control panel, whereafter the user can start 
the printing process by actuating the start key 61 . 
[0088] When a user has sent a number of print files 
each provided with a security code, and wishes subse- 
quently to print them all interactively, then after a first 
print file the JobManager 1 2 first applies the test to the 
next print file as to whether the security code or codes 
used by the user during the current session is/are still 
valid for the current file, and will not start a new check 
dialogue with the user until the current file has a different 
security code. The term "session" used here denotes a 
continuous series of actions at the machine, comprising 
copying, printing and/or scanning, carried out by one us- 
er. A session is terminated by the user deselecting his 
name, another user selecting his name, or by the user 
carrying out no actions for a predetermined time. In the 
latter case, a "time-out" mechanism ensures that the 
name of the user is deselected. 



[0089] In this way a user can work faster if he gives a 
series of print files the same security code. For printing 
he then only needs to input the code the first time. The 
use of a single security code is also convenient because 
s the user does not.then have to remember a number of 
different codes. 

[0090] This procedure is explained by the following 
example. Let us assume that a user has sent the follow- 
ing series of print files to the apparatus for. interactive 
10 printing: 

File 1, security code 123 
File 2, security code 123 
File 3, no security code 
15 File 4, security code 123- 
File 5, security code 456 . 
File 6, security code 456 
File 6, security code 123 . 

20 [0091] If the user now selects the files consecutively 
.for printing at the apparatus, he must input the code 1 23 
. at file 1 , whereafter the JobManager releases the doc- 
. ument for printing. File 2 is automatically released be- 
cause the code of file 1, is also. valid for this. File 3 has 

25 no security code and is therefore printed without check- 
ing. File 4 has the same security code as the preceding 
protected file, and is therefore automatically released al- 
so. File 5 has a different security code, and here the user 
. . must again input a code, whereafter file 6 is automati- 

30 cally released. :? 

[0092] Finally, : file 7 is again automatically released, 
since this security code has been used previously and 
maintained. . ^ V> 

[0093] In an alternative embodiment, only the last se- 

35 curity code used is maintained. In that case, therefore, 
the code 123 again has to be input by the user for file 7, 
since a different code. was used in the meantirrie. 
[0094] A user may select a series of files in one oper- 
ation in order to have them all printed thereafter by one 

40 actuation of the start key 61 . In that case, the JobMan- 
ager proceeds in accordance with the same procedure 
as above, but the selection of a subsequent file always 
takes place automatically until the series of selected 
files has been completely finished. 

45 [0095] The above-mentioned procedure for handling 
protected files is discussed in greater detail hereinafter 
with reference to Fig. 13.. 

Printing process 

so , . 

[0096] Fig. 9 shows the progress of the printing proc- 
. ess started either by the JobManager 12 when a print 
job of the first type (AP) reaches the head of the AP 
. queue, or by, the user as an interactive print job (IP). It 

ss should be noted here that the Job. Manager is so pro- 
grammed as to be able to start an automatic print job 
only if no activity has been observed on the operator 
control panel for a predetermined time, e.g. 30 seconds. 
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This prevents a user occupied in a job at the operator 
control panel from being disturbed by the sudden start 
of an automatic print job. 

[0097] If the access system of the accounting and se- 
curity unit 27 is switched on, the JobManager now first 
checks the authorisation of the relevant user (the owner 
of the print job). If the authorisation is not in order, the 
process is interrupted. If the print job is an automatic 
print job, the Job Manager records the print file as being 
of the second type and does not print it. It is possible to 
make a print giving the reasons why the job has not been 
carried out. In the case of an interactive print job, the 
JobManager refuses the order and displays a report 
thereof on the display at the operator control unit 13. 
[0098] If the user is authorised, the JobManager re- 
ports the print job to the CopyController 6 and gives a 
start command for this order to the JobServer, which in 
; turn starts up the PrintHandler 25, so that the latter reads 
the relevant print file from the storage unit 20, rasterises 
it, and stores it in the set memory 4. On a report from 
the PrintHandler to the CopyController 6 to the effect 
that sufficient image data are stored in the set memory, 
the CopyController starts the printer unit 5 to make a 
print. 

[0099] In this connection the CopyController first 
checks whether the print specifications belonging to the 
print job have been satisfied, for example if there is a 
stock of the required type of image supports (format, ori- 
entation, colour). If these specifications have not been 
met, then the job is stopped. The CopyController reports 
this to the PrintHandler, which passes the report through 
to the JobServer, the latter in turn passes it to the Job- 
Manager, and the latter reports, in the case of an inter- 
active print job, the impossibility for printing to be carried 
out, to the user by a message on the display of the op- 
erator control unit 1 3 or, in the case of an automatic print 
job, alters the description of the job in its administration 
system to an interactive print job, so that a user can con- 
sequently still start the job from the operator control pan- 
el at a later moment. Once again a print can be made 
showing the reasons why the job has not been carried 
out. 

[0100] If the print job can be processed, the printer 
unit 5 reads the image data out of the set memory 4, 
prints them, and reports this to the CopyController 6. 
When the complete print job has been carried out, the 
CopyController reports this to the PrintHandler 25, 
which passes this to the JobServer 21 , and the latter in 
turn to the JobManager 12, which then removes the job 
from its administration system, thus completing the 
printing process. 

Scanning 

[0101] Fig. 10 shows the procedure when a user wish- 
es to have a document scanned by the apparatus in or- 
der that the digital data generated in these conditions, 
hereinafter referred to as the scan file, may be further 



used for processing or storage at his workstation. The 
scan file in this case is not transmitted to a predeter- 
mined address over the network immediately after gen- 
eration as is usually the case, but is stored in the storage 
5 unit 20 of the apparatus, whereafter it must be called up 
from a workstation. The procedure with this is as follows. 
[0102] Using the key 64A on the operator control pan- 
el of the operator control unit 13 the user selects the 
"scanner" option. In response to this the operator control 
io unit asks the JobManager 1 2 for a list of all the names 
of users known to the JobManager, i.e.: all the user 
names in the database of the accounting and security 
unit 27. As already stated previously, these user names 
can be entered in the database by the apparatus man- 
's ager or be automatically added by the accounting and 
security unit 27 on receipt of a print order from a work- 
station. Also, when a program intended for communica- 
tion with the apparatus is started at a workstation this 
program can automatically be reported to the apparatus 
20 JobManager which then ensures that an entry for the 
user of the workstation is made in the database. 
[0103] In an alternative embodiment, the user names 
in the database are provided with an attribute which in- 
dicates whether they are authorised to make use of the 
25 scan function. In that case the list contains only the 
names of the authorised users. 
[0104] The Job Manager passes the list of the user 
names through to the operator control unit 1 3, which dis- 
plays this on the display 60 for selection by the operator. 
30 This is shown in Fig. 11 , which illustrates the display 60 
after selection of the scanner function. 
[0105] After the user has selected his name, the op- 
erator control unit passes this through to the JobMan- 
ager 1 2, wh ich by means of the accounting and security 
35 unit 27 then checks whether a user code is necessary 
to obtain access to the scanner function. If that is the 
case, then by means of the operator control unit 13 it 
conducts a dialogue with the user in order to check his 
code. In the case of a positive result, the JobManager 
40 releases the scanner function and automatically gener- 
ates a name for the data file to be made during scanning, 
and this is passed to the operator control unit 1 3, which 
in turn displays this file name on the display 60, so that 
the user subsequently knows the name by which he can 
45 find the scan file. This automatically generated name 
can, for example, have the form: 
YYYYMMDDhhmmssxxx, which successively shows 
the year, month, date, hour, minute and second of the 
scan action, and the serial number of the document in 
50 the scanned set. 

[0106] In addition, the operator control unit now dis- 
plays in a form similar to the form for selection of settings 
for a copying or printing process (cf. Figs. 3 and 4), a 
possible choice for parameters of the scan process, 
55 such as the resolution, the format (e.g. TIFF, BMP, etc.), 
the magnification factor, and whether the original docu- 
ment is to be scanned on one side or both sides. The 
user can select his settings from this or he can leave the 
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preselected values as they are. 

[0107] The selectable settings for the scan file which 
is to be generated also include protection by a security 
code or not. 

[01 08] The user then places his original documents in 
the input tray 111 of the document feeder 110 and actu- 
ates the start key 61 . If the user' has selected a security 
code, the operator control unit T3 asks the user first to 
input a code, and then sends a start command with all 
the data, including the code, to the JobManager 12. If 
no security code was selected, the step of asking for a 
code is skipped. 

[0109] The JobManager now reports the job to the 
Copy Controller 6 and sends a start command to the Job- 
Server 21 , which in turns starts the ScanHandler 26. The 
latter transmits a start command to the CopyController 
6, which controls the scanner unit 3 in order to transport 
the original documents one by one to the scanner, scan 
them, and generate scan files. In these conditions the 
scanner unit counts the number of original pages 
scanned. The scan files are stored in the set memory 4 
. and then transmitted to the ScanHandler, which; stores 
them in the storage unit 20, in combination with the se- 
curity code inputted by the user. In addition, the image 
processing function of the set memory also makes a file 
with a reduced image of the scanned image, -known as 
a 'thumbnail"-, and this is also stored in the. storage unit 
20. Thumbnails of this kind are used later for identifica- 
tion in the selection of a scan file. -: : 
[0110] When all the documents have been scanned, 
the ScanHandler 26 reports the job as finished to the 
JobServer, which in turn transmits this to the JobMan- 
ager. The latter passes the finished report to the opera- 
tor control unit 1 3, which displays it on the display 60 of 
the operator control panel, together with the number of 
pages scanned, so that the user can check whether any 
documents have been skipped. That concludes the 
scan job. 

Fetching a scan file using the workstation . 

. [0111] Fig. 12 shows the procedure when a user wish- 
es tofetch a scan file stored there under his name, using 
his workstation. 

[0112] The WS program for communication with the 
apparatus is also required for this operation. As already 
stated, this program is provided with its own user iden- 
tification and authorisation procedure. 
[0113] In the WS program, the user now selects a 
presentation function for all the scan files stored under 
his name in the storage unit 20. The WS program then 
asks for the list of these from the JobManager 1 2, which 
compiles the list from its own administration system and 
sends it back. In addition, the JobManager 1 2 by means 
of the JobServer 21 and OutputHandler 16 sends to the 
workstation the thumbnail belonging to each scan file. 
This can, for example, also be the thumbnail of the first 
page of a multi-page document. 



[011 4] The WS program now displays on the worksta- 
tion screen the list of scan files with the associated 
thumbnails for selection by the user. The user is also 
offered a choice for the transport mode (encrypted or 

5 not), the required format of the file, and the name under 
which the file is to be imported (note that the file still has 
an automatically generated name which contains no in- 
formation as to the contents). After making the settings, 
the user selects the function "upload", whereupon the 

io WS program sends a request to the JobManager 12 to 
forward the selected file. 

[0115] The JobManager now asks the JobServer 21 
whether this file is protected with a code, and if so, 
through the intermediary of the WS program, it asks the 
is user for the code. If the user gives the correct code, the 
JobManager releases the file. If the file is not protected, 
' the JobManager immediately -releases the file. 

[0116] The JobManager 12 then gives an order for the 
file to be sent to the JobServer 21 , which compares the 
file format selected by the user with the current format 
in which the file is stored in the storage unit 20. If the 
two^formats are different, the JobServer 21 gives the 
conversion unit 28 an order to read out the file, convert 
it, and store it again in the storage unit 20. 
[0117] The JobServer then starts the OutputHandler 
; 16 to transmit the file to the workstation. When it has 
- completed its task, it reports this* to the JobServer 21 , 
which erases the file from the storage unit 20 and pass- 
es it on to the JobManager 12, which in turn removes 
the file from its administration system. Alternatively, the 
scan file can be kept until the user removes it actively 
[0118] When a user calls up a number of scan files 
together or in series, the JobManager in checking secu- 
rity codes again operates in accordance with the proce- 
dure in which codes already used are first tested before 
the user is asked for a code, so that in the case of a 
series of files having the same code the userdoes not 
always need to input that code. This procedure has al- 
ready been referred to in connection with interactive 
printing and will be described in detail hereinafter with 
reference to Fig. 13. 1 • 

Deferred copying 

[0119] A "deferred copying" function is also supported 
by means of the described embodiments of scanning 
and printing. In this function an original document or a 
set of documents is scanned; whereafter the digital im- 
age data thus generated are stored in the storage unit 
20 under the user's name, and can then, at a later time, 
be brought up for printing. This progresses as follows. 
[0120] The function is started by selecting the option 
"deferred copying" (scan now - print later) in the column 
above key 64A on the operator control panel. This is 
then followed by exactly the same procedure as de- 
scribed with reference to Fig. 1 0 for the scanning of doc- 
uments, in which case the file of generated image data 
is now so administered by the JobManager that when 
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the interactive print function is called up it is included in 
the list of files for selection for printing. If the user so 
whishes, a security code can be associated to the scan 
files also in this function. The process is completed on 
completion of the scan job. 

[0121] In order then to print the file, a user should se- 
lect the option 'printer" in the column above key 64A on 
the operator control panel, in which case as already de- 
scribed the scan files of "deferred copying" jobs are now 
also displayed for selection in the column above key 
64E. The printing process is fully identical to that de- 
scribed with reference to Fig. 8, including any check for 
a file security code. Once again, if a series of protected 
fiies has been selected together or in series, it can first 
automatically try out a code used previously in the same 
session before the user is asked for the code. 
[0122] The above-mentioned procedure for handling 
series of protected files will now be explained with ref- 
erence to the flow diagram in Fig. 1 3. 
[0123] In the following description, the term "session" 
denotes a continuous series of actions by one user at 
the machine. A session starts with a user selecting his 
name in the operator control display screen, and termi- 
nates by the same user deselecting his name, a different 
user name being selected, or by the JobManager auto- 
matically terminating the session on expiry of a prede- 
termined time ("time-out") after an action by a user at 
the machine, during which time no new action is carried 
out. 

[01 24] In a basic embodiment, each code used during 
a session is stored and tried out on a subsequent pro- 
tected file. In an alternative embodiment, only the code 
last used during the session is maintained and tried out. 
[0125] After a user has selected a file or a series of 
files together and has given a start command for a spe- 
cific operation to be carried out (e.g. printing) on said 
file or files, the required operation is carried out file by 
file. 

[01 26] First of all the JobManager 1 2 by means of the 
JobServer 21 checks whether the file in question is pro- 
vided with a security code. If not," the JobManager re- 
leases the file for processing, this being denoted by the 
term "operation" in a circle in Fig. 13. 
[0127] If the file is protected, the JobManager 12 
checks whether a security code has already been input 
since the start of the session. If so, the JobManager 
tests whether said code or, if more codes have already 
been used, one of such codes, is also valid for the file 
now being dealt with. In the latter case, the JobManager 
again immediately releases the file for the required op- 
eration. If none of the codes tried out is valid for the file 
now being handled or if there is no stored code, the Job- 
Manager 12 through the agency of the operator control 
unit 13 carries out a dialogue with the user, in which the 
JobManager 1 2 asks the user for the code. 
[0128] If the latter inputs the correct code, the Job 
Manager releases the file for processing and at the 
same time stores the input code in its memory. In the 



alternative embodiment, in which only one code is main- 
tained, the JobManager overwrites any code already 
stored with the newly input code, so that only the last 
code used is available. 
5 [0129] After completion of the required operation on 
the treated file, the Job Manager checks whether anoth- 
er file has been selected, and the entire action is carried 
out afresh for the next file. 

[0130] If there are no more files, the Job Manager 
10 waits for a predetermined time interval ("time-out"), to 
see whether a new file selection is carried out by the 
same user. If this is not the case, or if a different user 
reports in the meantime, then the Job Manager removes 
the file code from its memory and terminates the session 
is and erases from the memory all the security codes 
stored during the session. 

[0131] If the user makes a new file selection, the pro- 
cedure described starts afresh. 
[0132] Although the invention has been described 
20 with reference to the above exemplified embodiment, it 
will be clear to one skilled in the art that other embodi- 
ments are possible within the text of the claims. They 
are considered as coming within the protection of this 
patent. 

25 

Claims 

1. A method of making available digital image data 
30 files in a digital image processing apparatus, com- 
prising: 

offering for selection by an operator at least one 
digital image data file for the purpose of further 
35 handling; 

characterised by 

after selection of at least one file by the opera- 
40 tor, checking whether the selected file is provid- 

ed with a security code; 
if a selected file is provided with a security code, 
asking the operator to input an access code 
corresponding to the security code; and 
45 if the operator inputs the correct access code, 

releasing the selected file for the said further 
handling; 

wherein 

so 

a) in a procedure for releasing a first file provid- 
ed with a security code the correct access code 
is maintained for an uninterrupted series of se- 
lection actions by the operator, 
55 b) in a procedure for releasing a second file pro- 

vided with a security code, which procedure fol- 
lows on at least one procedure for releasing a 
first file provided with a security code, a trial run 
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is first automatically carried out as to whether 
a maintained access code for a said first file is 
also correct for the said second file, and 
c) if no access code correct for the second file 
appears to be available the operator is asked 5 
to input an access code for the same. 
..* ' ' 

A method according to claim 1:, , 

wherein in the automatic step b) each access 
code maintained in a previous procedure for releas- 10 
ing a first file provided with a security code is tried 
out. 



A method according to claim 1 , 

wherein in the automatic stepb) only the ac- 
cess code maintained in the procedure for releasing 
a first file provided with a security code directly pre- 
ceding the procedure for the release of said second 
file is tried out. 

... ■ ■ j 

A method according to any one of. -the preceding 
claims; : 

characterised in that 

the method forms part of a printing process 
comprising: 
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selecting, by an operator, at least one stored 
digital image data file, which file is provided with : 
a security code; ....... 

- . checking, in accordance with the said method, 30 

an access code input by the operator; and . . 
if the result of the check is positive, printing a 
selected file on a command by the operator. 

5. A method according to any one of claims 1 to 3, 35 

characterised in that 

the method forms part of a scan process com- 
prising: 

, scanning one or more documents and in so do- 40 
ing generating digital image data files; 
providing generated files with a security code, 

- storing the generated files together with their 
security code; 

using the said method to make the files availa- 
ble for further processing. 

6. Digital image processing apparatus, 

comprising a storage unit for digital data files so 
for printing, a control unit, and an operator con- 
trol unit, 

wherein the control unit is provided with means 
for coming into contact with an operator via the 
operator control unit, and at the same time • 55 



dling, 

characterised in that 
the control unit is also provided with means 

for checking, after selection of at least one 
file by the operator, whether a selected file 
is provided with a security code, 
if a selected file is provided with a security 
code, asking the operator to input an ac- 
cess code corresponding to the security 
code, and 

releasing a selected file for the said further 
handling if the operator inputs the correct 
access code, 

. . wherein . : 
the control unit is provided with means whereby 
a correct access code input by the operator for 
release of a first file is maintained foF an unin- 
. terrupted series of selection actions by the said 

operator, and 

the control unit is adapted, for the purpose of 
releasing a second file provided with a security 
. code, first to try out whether a said maintained 
access code is also correct for said second file, 
. ■ . and only in the event that said, access code is 
not correct for the second file, to ask the oper- 
ator to input an access code for the same. 

7. A digital image processing apparatus according to 
claim 6, wherein the means for maintaining an ac- 
cess code maintain all the correct access codes 
used during the said uninterrupted series of selec- 
tion actions. , ^ 

8. A digital image processing apparatus according to 
claim 6, wherein the means for maintaining an ac- 
cess code maintain only the correct access code 
used most recently during the said uninterrupted 

. series of selection actions. 

9. A digital image processing apparatus according to 
claim 6, also provided with a printing unit, 

wherein the said further handling comprises 
printing a selected file. 

10. A digital image processing apparatus according to 
claim 6, also provided with a scanner unit, , 

. . wherein the files for selection comprise files 
of digital image data generated during a scanning 
• i OD - 



offering at least one digital image data file 
for selection for the purpose of further han- 
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User starts copying or printing session 



• 1 ' ' User keys in his user code 
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No 



Fig. 5A 
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File for automatic printing arrives; 
User's name is extracted 
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JM passes copying command to CC 



CC starts scanner 

Scanner sets scan in set memory 



CC starts printer; 
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End 
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Print job arrives 



IH stores print spec and print data in disk 20 
and reports job to JS; 
JS passes information to JM 
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JM accepts AP? 
Yes 



JM enters job as IP 
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FIG. 7 
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User selects "print" 

Ul asks JM for list of user name 

with print jobs 



JM gives Ul list of user names 
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User selects his name 
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Ul passes file name to JM 




JM carries out procedure for 
file security code 



User makes settings and 
presses "start" 

Ul passes to JM 



I Start IP printing process 

FIG. 8 
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Start IP print process 
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print queue 



JM checks authorisation 
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PrintHandler reads job data from 
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Printer prints job 
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PrintHandler 
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print process 
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User selects "scanning" 

Ul asks JM for list of user names 



JM passes list to Ul 



Ul displays list 

User selects his name 

Ul passes user name to JM 



JM checks pin code 
requirement (a&s unit) 
Yes No 



pincode-dialogue; 
Not OK OK 
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jStop 



JM generates file name and 
passes to Ul 
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User makes settings for job, selects 
secured/not secured and presses "start' 

'protected" "Not protected" 



Ul asks user for file code 
user keys in code 



Ul sends command with 
file name, (code) and 
settings to JM 



FIG. 10 



JM reports job to CC and sends start 
command to JS 



JS starts ScanHan dler 



Scanhandler sends start command to CC 
31 



CC starts scanner; the latter sends 
scanned files via set memory to 
Scanhandler 



ScanHandler stores scan files, provided 
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finished to JS; this passes on to JM 



JM passes to Ul and writes scan file in 

under user name i 

+ - 



Ul reports job as finished on display 



End 
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user asks for overview of scan files 
WS program passes user name to JM and 
asks for list of user's scan files 



JM gives list of scan files (with thumbnails) 



WS program displays list (with thumbnails) 
user sleets: scanfile 

transport mode 

file format 
user gives new file name 
user selects "upload" 
WS program passes command to JM 
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i: r 
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Ul passes to JM 
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end 
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